WordPress Elementor Addons by Livemesh plugin <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Slider Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Posts Slider Widget vulnerability discovered by 0liveira in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.4...

WordPress Elementor Addons by Livemesh plugin <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Carousel Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Posts Carousel Widget vulnerability discovered by RandomRoot in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.4...

WordPress Elementor Addons by Livemesh plugin <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Multislider Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Posts Multislider Widget vulnerability discovered by Drian - Pato Academy in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.4...

CVE-2025-47359

creationtimestamp| type| source ---|---|--- 2026-02-02 16:59:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2bdm7p23 2026-02-02 17:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvd2zbtg224...

CERTFR-2026-ACT-005

creationtimestamp| type| source ---|---|--- 2026-02-02 14:24:55+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mdv2f55uwk26 2026-02-02 15:42:59+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3mdv6qqjhxb2m 2026-02-06 23:48:20+00:00| seen|...

CVE-2026-23997

creationtimestamp| type| source ---|---|--- 2026-02-02 10:50:35+00:00| published-proof-of-concept| https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-4v7v-7v7r-3r5h 2026-02-02 23:21:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyeaundd2r 2026-02-02...

WordPress Elementor Addons by Livemesh plugin <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Posts Grid vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Posts Grid vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.7...

CVE-2026-25200

creationtimestamp| type| source ---|---|--- 2026-02-02 05:24:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu467axc523 2026-02-02 05:24:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdu47g47v425...

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.13 - Unauthenticated Draft Posts Information Exposure vulnerability

Unauthenticated Draft Posts Information Exposure vulnerability discovered by Nguyen C in WordPress Plugin Shortcodes and extra features for Phlox theme versions = 2.17.13...

CVE-2026-25253

creationtimestamp| type| source ---|---|--- 2026-02-01 23:20:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdtht7p7ts2r 2026-02-01 23:20:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdthtljmds2h 2026-02-02 09:07:29+00:00| seen|...

CVE-2026-23515

creationtimestamp| type| source ---|---|--- 2026-01-31 16:42:49+00:00| published-proof-of-concept| https://github.com/SignalK/signalk-server/security/advisories/GHSA-p8gp-2w28-mhwg 2026-02-02 23:21:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvye2ztuo2h 2026-02-02...

CVE-2025-15525

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-15525 Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-15525 Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

EUVD-2025-206596

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-15525

CVE-2025-15525 affects the WordPress plugin “Ajax Load More – Infinite Scroll, Load More, & Lazy Load.” The vulnerability arises from incorrect authorization in the parse_custom_args() function, allowing unauthenticated users to view titles and excerpts of private, draft, pending, scheduled, and ...

WordPress plugin Ajax Load More – Infinite Scroll, Load More, & Lazy Load security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

PT-2026-5501

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse custom args function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expo...

CVE-2025-15525: Incorrect Authorization

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

CVE-2025-62348

creationtimestamp| type| source ---|---|--- 2026-01-30 19:17:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnzdytkn52x 2026-01-30 19:18:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdnzemfold25...